GoKawiilOWASP researchers find prompt injection risk invisible to security scanners
OWASP GenAI Security Project leaders Kyriakos Lambros and Steve Wilson published an analysis comparing expert rankings of LLM security threats against 6,639 real-world incidents pulled from CVE, GitHub advisories, OSV and the AIAAIC database. Prompt injection tops the OWASP expert list for three straight years but ranks only 12th in the incident data, and statistical testing found no reliable agreement between the two rankings.